Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft
File: 1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft (raw, json)
Hash identifier: Q1/q5hv2qCFo2Vw7MIL4BAIdwEQfSDVZBgMyakSASMM=
Subject key identifier: F1:B4:C2:85:87:A9:30:F4:F8:92:50:8C:64:D5:04:9E:BA:5E:7D:47
Authority key identifier: D5:4B:82:D7:19:14:40:02:05:1D:A0:F8:8C:76:8D:E4:40:AC:20:BD
Certificate issuer: /CN=d54b82d719144002051da0f88c768de440ac20bd
Certificate serial: 0196767A5EAB9CB02EDECA37BCCB17D89344
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1UuC1xkUQAIFHaD4jHaN5ECsIL0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft
Manifest number: 150C
Signing time: Sun 27 Apr 2025 09:00:53 +0000
Manifest this update: Sun 27 Apr 2025 09:00:53 +0000
Manifest next update: Mon 28 Apr 2025 09:00:53 +0000
Files and hashes: 1: 1UuC1xkUQAIFHaD4jHaN5ECsIL0.crl (hash: puEpV0enpZb42Ddq/SwGaef9m1e9Rxg8BH4DUOigSlE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1UuC1xkUQAIFHaD4jHaN5ECsIL0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:5e:ab:9c:b0:2e:de:ca:37:bc:cb:17:d8:93:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d54b82d719144002051da0f88c768de440ac20bd
Validity
Not Before: Apr 27 09:00:53 2025 GMT
Not After : Apr 28 09:00:53 2025 GMT
Subject: CN=f1b4c28587a930f4f892508c64d5049eba5e7d47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:08:12:f2:df:b5:b9:8f:05:aa:9e:42:f6:3b:
25:72:d2:d9:1e:29:f1:f3:40:6f:8d:0e:cd:69:a4:
24:82:1a:f7:3c:67:71:98:dd:62:68:85:74:20:c5:
22:e9:eb:c2:dc:ee:7e:be:27:9f:e6:0a:ff:fa:6c:
27:62:d5:28:5a:54:e1:dc:c6:13:2b:31:1d:72:a3:
50:77:2b:3d:92:c0:5f:e6:af:eb:13:46:d6:61:f4:
97:b3:84:03:93:ed:88:b3:8a:31:40:c3:37:40:60:
70:3d:35:6e:3f:d3:0d:bc:61:af:ba:00:7b:65:8c:
98:27:ca:20:11:14:ac:92:6b:e2:d1:f5:97:5c:99:
09:61:c4:9c:63:b5:35:75:e6:48:18:52:ba:ee:48:
1e:24:4a:f6:5f:31:7a:3a:8d:ae:50:ab:1a:38:45:
5b:e1:cd:1a:2c:74:1e:50:9c:68:8c:93:70:14:4b:
8f:db:62:df:16:2a:8c:f0:c2:a6:75:39:58:bd:24:
e2:4b:af:ed:6c:a1:8a:81:e8:2b:71:d9:fd:f8:db:
c2:98:f5:23:0f:9d:fb:c1:dd:a6:0f:48:f5:5e:17:
43:3b:aa:2f:b1:42:c7:db:dc:95:2b:b0:59:b3:cd:
56:0c:cd:9d:ac:09:12:5b:d7:13:b2:b1:b5:f4:e5:
c4:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:B4:C2:85:87:A9:30:F4:F8:92:50:8C:64:D5:04:9E:BA:5E:7D:47
X509v3 Authority Key Identifier:
keyid:D5:4B:82:D7:19:14:40:02:05:1D:A0:F8:8C:76:8D:E4:40:AC:20:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1UuC1xkUQAIFHaD4jHaN5ECsIL0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:01:e3:a8:8c:21:0d:ca:a8:df:fd:f6:c6:45:bf:ea:3e:d0:
a4:c0:6c:26:39:1a:40:a0:77:8a:53:4a:cc:6b:02:2b:3a:f0:
35:ae:37:85:5f:d1:b5:b5:81:0d:95:1a:69:b5:07:90:ed:32:
a3:b1:41:78:75:e0:df:e4:f3:59:b0:d2:87:67:db:d8:d7:23:
1e:11:d9:54:61:f0:18:37:35:3b:4d:45:58:4f:26:7a:84:a9:
b7:71:bf:a8:95:3a:09:98:63:b5:10:31:34:e7:54:58:3c:6e:
ce:b3:72:99:16:25:f3:8e:f4:33:ac:44:ff:dd:f5:ef:42:d5:
06:81:78:06:10:24:48:f1:b1:b1:c3:48:38:c9:43:b9:2a:4c:
4d:d2:d1:5e:2b:bb:1e:2e:17:3b:bf:42:38:08:c0:fe:e0:e9:
d3:28:5d:b9:f4:c0:7e:b3:92:d9:1a:60:8b:e4:94:66:f4:ec:
d4:22:f7:3a:a8:3b:83:e0:91:17:6d:cb:73:4d:7e:ba:45:e5:
38:4c:1f:6c:48:99:bb:e7:fa:77:da:f8:91:6c:c3:88:f4:8b:
3e:fb:bb:13:60:f2:8c:3f:68:3e:69:29:b4:17:35:cd:14:1d:
06:3b:1f:77:01:a4:fa:fd:c8:33:e7:ea:b0:fa:10:5a:39:0f:
dc:ba:98:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:10:11 2025 by rpki-client